On 05/03/2013 12:42 PM, Aly Khimji wrote:
Hey Pavel/guys

Any luck recreating the problem?

Hi,
sorry for the delay. I can confirm that sudo does not work with users from trusted domain anymore. I created a ticket:

https://fedorahosted.org/sssd/ticket/1912

Patch for 1.9 branch is on sssd-devel list.

Thx for the help

Aly


Thanks Pavel,

Very much appreciated

Aly


On Tue, Apr 30, 2013 at 1:41 PM, Pavel Brezina <pbrez...@redhat.com
<mailto:pbrez...@redhat.com>> wrote:



    ----- Original Message -----
     > From: "Pavel Březina" <pbrez...@redhat.com
    <mailto:pbrez...@redhat.com>>
     > To: "Aly Khimji" <aly.khi...@gmail.com <mailto:aly.khi...@gmail.com>>
     > Cc: freeipa-users@redhat.com <mailto:freeipa-users@redhat.com>
     > Sent: Monday, April 29, 2013 9:11:25 PM
     > Subject: Re: [Freeipa-users] Issue IPA: AD Users and IPA Users
    when using SSS/LDAP with SUDO
     >
     > On 04/29/2013 08:31 PM, Aly Khimji wrote:
     > > Hey Pavel/Guys,
     > >
     > > Do you see anything in the new logs that might help?
     > >
     > > I saw this bug
    https://bugzilla.redhat.com/show_bug.cgi?id=871160 that
     > > reports this issue exactly.
     > > However its reported as fixed but I am still having the same
    issue. I am
     > > building out a new test environment and I am also deploying a FC18
     > > client which seems to have newer sssd/libsss_sudo packages that i
     > > suppose haven't made it up stream yet
     > >
     > > Currently installed on my client
     > >
     > > libsss_sudo-1.9.2-82.7.el6_4.x86_64
     > > sssd-client-1.9.2-82.7.el6_4.x86_64
     > > libsss_idmap-1.9.2-82.7.el6_4.x86_64
     > > libsss_autofs-1.9.2-82.el6.x86_64
     > > sssd-1.9.2-82.7.el6_4.x86_64
     > >
     > > I've increased the logging to 10, just incase it helps. here it the
     > > sss_sudo log for a login, then sudo attempt
     > >
     > >
     > > Thx
     > >
     > > Aly
     >
     > Hi,
     > I'm sorry for such a late answer. The logs says, that in the time of
     > using sudo, the user akhimji is not present in the cache, which
    should
     > not happen if you managed to log in. I will try to reproduce the
    issue
     > first thing tomorrow and let you know.

    Hi,
    I'm sorry, I had some technical diffucilties and didn't manage to
    get to it today. Will try it as soon as possible.



_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to